Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: lKKdj3ZgMXF9cybhxcf+j5nNms5EYaIeSwNw2dr0ImU=
Subject key identifier: 6B:CC:AD:EA:C9:AC:42:1F:AA:90:E6:1B:3F:74:7D:A1:64:96:6B:F8
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 0194BC3C0905C6FBF69451CE7CD6B741A772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 08EA
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: X1WCnmzZHmO2GvaubLzbcoYzVstEudIg3SHcsjVoUy0=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:05:c6:fb:f6:94:51:ce:7c:d6:b7:41:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=6bccadeac9ac421faa90e61b3f747da164966bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:47:da:19:f0:34:67:d7:47:c2:f9:cf:fc:
ca:36:b5:2b:20:11:9c:57:e4:0d:90:18:ee:07:a8:
22:87:17:30:d3:fe:0b:48:dd:cc:bc:c5:3c:4a:6e:
8d:c4:d5:64:93:df:67:25:fd:82:15:96:68:4f:3d:
76:01:40:32:2b:11:3a:5f:d6:6e:99:25:b9:2c:a0:
5e:a1:d9:8f:d1:cf:6d:f5:fb:bc:5c:da:fc:e4:82:
e6:1d:8d:6a:91:c9:a3:67:38:0a:eb:66:d1:64:e2:
bf:06:11:9f:54:fc:9a:9f:cc:61:ab:50:dc:2e:7f:
f6:85:a2:8e:b8:ad:78:6d:60:29:04:9b:0e:4d:2e:
8d:bb:41:ce:05:90:a0:8a:70:3d:2a:54:de:86:7e:
9c:b0:4b:11:04:ba:bc:a3:ca:08:68:ee:09:52:62:
a4:09:f2:0a:78:78:47:d8:03:62:d2:c9:df:a5:be:
4b:32:cf:33:5d:16:f9:28:15:91:1d:b3:84:93:f1:
6d:b0:c0:cb:8f:a2:ce:d2:93:dc:63:1b:d0:02:2f:
06:61:16:62:f2:27:3d:78:4d:81:40:a0:0e:7e:b2:
a1:ae:e6:2c:8d:c6:fb:22:0a:6f:19:73:cb:30:c9:
55:0a:66:c7:e6:5f:b8:24:91:e1:7e:5e:89:34:f8:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:AD:EA:C9:AC:42:1F:AA:90:E6:1B:3F:74:7D:A1:64:96:6B:F8
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ad:70:0c:68:4e:fc:e4:24:42:d4:4f:b4:6b:b1:12:f4:01:
10:6d:e4:c9:14:20:0a:f6:b2:46:9d:6a:0c:61:29:6b:6a:d4:
e2:72:30:b1:e3:d0:30:77:29:b0:2a:af:cc:8f:a9:2f:c2:e0:
98:02:58:46:cd:f5:78:d2:d1:ce:08:30:34:d5:a5:fb:7d:f9:
54:d5:b8:81:cd:af:f0:62:c7:96:fd:87:7c:f9:67:97:13:02:
39:89:b8:e8:b1:b7:47:ef:4b:a1:c2:b7:eb:06:57:7f:ba:da:
0d:1a:a7:f7:3e:0c:a6:67:a2:87:a1:f7:2f:fb:a4:7b:79:a9:
4e:76:cc:bf:74:65:c5:90:5d:69:15:c6:9f:31:02:c1:91:f2:
b8:52:57:2f:c5:41:e4:39:5f:57:fa:1d:f6:e1:94:65:14:3c:
4c:59:a0:5b:b7:0e:58:48:9a:22:6a:93:67:65:57:fd:b3:04:
62:4d:a0:0c:84:aa:45:ec:72:bf:61:fe:6c:9e:76:34:f4:90:
26:80:7d:76:73:92:72:f6:a3:38:64:fc:84:90:19:09:f8:41:
b8:87:9b:77:a1:22:ff:00:e1:f9:40:73:97:2c:05:80:4a:75:
82:a8:61:41:43:13:49:22:b1:cd:8c:90:ae:3e:09:b8:1f:4d:
77:df:d6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAkFxvv2lFHOfNa3QadyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg2YmNjYWRlYWM5YWM0MjFmYWE5MGU2MWIzZjc0N2RhMTY0OTY2YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UVH2hnwNGfXR8L5z/zKNrUrIBGc
V+QNkBjuB6gihxcw0/4LSN3MvMU8Sm6NxNVkk99nJf2CFZZoTz12AUAyKxE6X9Zu
mSW5LKBeodmP0c9t9fu8XNr85ILmHY1qkcmjZzgK62bRZOK/BhGfVPyan8xhq1Dc
Ln/2haKOuK14bWApBJsOTS6Nu0HOBZCginA9KlTehn6csEsRBLq8o8oIaO4JUmKk
CfIKeHhH2ANi0snfpb5LMs8zXRb5KBWRHbOEk/FtsMDLj6LO0pPcYxvQAi8GYRZi
8ic9eE2BQKAOfrKhruYsjcb7IgpvGXPLMMlVCmbH5l+4JJHhfl6JNPgXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvMrerJrEIfqpDmGz90faFklmv4MB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK1wDGhO
/OQkQtRPtGuxEvQBEG3kyRQgCvayRp1qDGEpa2rU4nIwsePQMHcpsCqvzI+pL8Lg
mAJYRs31eNLRzggwNNWl+335VNW4gc2v8GLHlv2HfPlnlxMCOYm46LG3R+9LocK3
6wZXf7raDRqn9z4Mpmeih6H3L/uke3mpTnbMv3RlxZBdaRXGnzECwZHyuFJXL8VB
5DlfV/od9uGUZRQ8TFmgW7cOWEiaImqTZ2VX/bMEYk2gDISqRexyv2H+bJ52NPSQ
JoB9dnOScvajOGT8hJAZCfhBuIebd6Ei/wDh+UBzlywFgEp1gqhhQUMTSSKxzYyQ
rj4JuB9Nd9/WxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:44 2025 by rpki-client